HashiCorp Vault
By HashiCorp
A secrets-management server that stores API keys and certificates and can issue short-lived database and cloud credentials on demand. Vault moved to BUSL-1.1 for new releases in 2023 and became part of IBM through its 2025 acquisition of HashiCorp.
Verified Source: 1
- Product type
- Software
- Deployment
- SaaSOn-premCLI
- Organization size
- Mid-marketEnterprise
- Pricing tier
- Freemium
Capability checklist
PAMHow HashiCorp Vault measures up against the full Privileged Access Management taxonomy.
- Privileged credential vaulting — supported
- Stores and rotates admin passwords and keys in an encrypted vault.
- Session recording & monitoring — not supported
- Records and can live-monitor privileged sessions for audit and investigation.
- Just-in-time access — not supported
- Grants elevated access for a limited time window instead of standing privilege.
- Least-privilege elevation — not supported
- Allows temporary privilege elevation for a specific task rather than full admin rights.
- Secrets management — supported
- Manages API keys, certificates, and application secrets alongside human credentials.
- Service account management — supported
- Discovers and rotates credentials for non-human, machine-to-machine accounts.
Alternatives
Other Privileged Access Management tools with overlapping capabilities, sized for similar teams.
Appears in stacks
Real-world stacks that include HashiCorp Vault.